| commit | 096654adb312a1bc858a0f886b8fba755eab52b4 | [log] [tgz] |
|---|---|---|
| author | Tim Windelschmidt <tim@monogon.tech> | Thu Apr 18 23:10:19 2024 +0200 |
| committer | Tim Windelschmidt <tim@monogon.tech> | Wed Apr 24 22:29:11 2024 +0000 |
| tree | bb753ba3a24eab6a63b7f7c1757f35f0540b880a | |
| parent | a355821fa06a7f68ff8ddca6050f71e92e4939a5 [diff] [blame] |
treewide: add missing error handling Change-Id: I55ccf3ff490b58f6af93e665c668428acddc8d65 Reviewed-on: https://review.monogon.dev/c/monogon/+/3019 Vouch-Run-CI: Tim Windelschmidt <tim@monogon.tech> Tested-by: Jenkins CI Reviewed-by: Serge Bazanski <serge@monogon.tech>
diff --git a/metropolis/node/kubernetes/authproxy/authproxy.go b/metropolis/node/kubernetes/authproxy/authproxy.go index e8e6fd8..c4a844e 100644 --- a/metropolis/node/kubernetes/authproxy/authproxy.go +++ b/metropolis/node/kubernetes/authproxy/authproxy.go
@@ -56,6 +56,9 @@ k8sCAs := x509.NewCertPool() cert, _, err := s.KPKI.Certificate(ctx, pki.IdCA) + if err != nil { + return fmt.Errorf("could not load certificate %q from PKI: %w", pki.IdCA, err) + } parsedCert, err := x509.ParseCertificate(cert) if err != nil { return fmt.Errorf("failed to parse K8s CA certificate: %w", err)